Psftp Psftpd
4 CVEs affecting Psftp Psftpd. Latest disclosed: 2017-11-15. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-15271 | Medium | 5.9 | 2017-11-15 | A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be triggered prior to authentication. The… |
CVE-2017-15272 | Medium | 5.3 | 2017-11-15 | The PSFTPd 10.0.4 Build 729 server stores its configuration inside PSFTPd.dat. This file is a Microsoft Access Database and can be extracted. The application s… |
CVE-2017-15270 | Medium | 5.3 | 2017-11-15 | The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file. This can be used by attackers to h… |
CVE-2017-15269 | Medium | 4.3 | 2017-11-15 | The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b" and allow performing scans via the FTP… |